A system administrator reports that an unauthorized user has accessed the network. Which of the
following would be the FIRST action to take?

A.
Contact law enforcement officials.

B.
Determine the business impact.

C.
Contain the problem.

D.
Notify management.